two questions with regards accounts on the trusted server

[Hanry Zhou]

1. how can I tell if "sys", "bin"... accounts are disabled or not?

2. currently root only be allowed to get in via another regular user account by "su", but where exactly is this function being set? we are not using /etc/security...

Thanks,

[Steven E. Protter]

Shalom,

1) Check the shell entry in /etc/passwd
Don't mess with either or your system might cease doing productive work.

2) /etc/pam.d/system-auth and/or su in the same directory.

SEP

[Hanry Zhou]

I wanted to add more infor on my 2nd question.

Currently, the root is being set to log into the system by su from a regular user, and the audting person wants to show her that is the case on this system. I only tell her this is required by the trusted system.

Is there any field or command I can prove that?

[Tim Nelson]

1) getprpw sys
getprpw bin

2) root retriction possibilities are
/etc/securetty ( restrict direct telnet for root, does not apply to exec, ssh, remsh...)
/etc/profile ( possible root user ID check for tty )
/.profile ( same as above)